A network security audit is recommending to upgrade all versions of Java on the SCM Server to the latest version. Can this be done?

Background:

Java is needed for SCM Workbench, the Eclipse Plugin, and any custom Java programs or scripts associated with SCM UDP processes. Currently, SCM Client installs with its own copy of the Java JRE in the %CA_SCM_HOME%\jre folder, and will not use any other copy of Java installed on the machine. The version that comes with SCM v13.0.3 is "1.8.0_131". This can be upgraded to the latest Java, if needed, but there is a special process for that, so let me know if you need that.

Environment:

SCM v13.0.3Windows platforms

Instructions:

1. Shut down all SCM-related processes running on the machine.

2. Delete the %CA_SCM_HOME%\jre folder. If you have trouble deleting all the files in the %CA_SCM_HOME%\jre folder, see the Additional Information section below.

3. Install the new version of JRE to its default location.

4. Copy the jre folder from the default location to the %CA_SCM_HOME% folder. If the jre folder in its default location is named to include the version (for example C:\Program Files\Java\jre1.8.0_131) you will need to rename SCM’s copy to just jre.

Not that with versions of CA SCM Client earlier than 13.0.3, there is an additional script that must be run to complete the process. If you need this script, please contact support.

Additional Information:

There are some instances where Windows will put a lock on certain files with the %CA_SCM_HOME%\jre folder, making it impossible to delete the folder. This most often happens with certain True Type Font (ttf) files. The following method will allow you to delete these files, even if the system has a lock on them.

1. Open a command prompt window in "Run as administrator" mode and navigate to %CA_SCM_HOME%

2. Execute the delete command to eliminate all but the locked files: del /f/s/q jre

You will get error messages about the ttf files in the lib\fonts folder. No worries at this point.

3. Reboot the machine (I think this is what releases the hold on those files after the rest of the jre folder is gone)

4. Open a command prompt window in "Run as administrator" mode and navigate to %CA_SCM_HOME%